@wrongstack/cli 1.0.35 → 1.0.37

package/dist/{chunk-EWKESL4L.js → chunk-P24ZPPYH.js}

@@ -51,4 +51,4 @@ export {
   patchConfig,
   fmtTaskResultLine
 };
-//# sourceMappingURL=chunk-EWKESL4L.js.map
+//# sourceMappingURL=chunk-P24ZPPYH.js.map

package/dist/chunk-PY2LMG2V.js

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-PY2LMG2V.js.map

package/dist/{chunk-CSAPOCBP.js → chunk-QC6CLAK7.js}

@@ -21,4 +21,4 @@ function restoreFlags(args, deps, names) {
 export {
   restoreFlags
 };
-//# sourceMappingURL=chunk-CSAPOCBP.js.map
+//# sourceMappingURL=chunk-QC6CLAK7.js.map

package/dist/{chunk-HXJYHAR4.js → chunk-QVITQ425.js}

@@ -35,4 +35,4 @@ export {
   terminalText,
   terminalLink
 };
-//# sourceMappingURL=chunk-HXJYHAR4.js.map
+//# sourceMappingURL=chunk-QVITQ425.js.map

package/dist/{chunk-GZSKLXYG.js → chunk-RAWHRRUJ.js}

@@ -2,7 +2,7 @@ import {
   hasApiKey,
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-RKU66D2O.js";
+} from "./chunk-57PSSEBR.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -12,14 +12,14 @@ import {
   nowIso,
   resolveActiveApiKey,
   writeKeysBack
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ZCXZGYO5.js";
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-4BX2YDTQ.js";
+} from "./chunk-BIGSVBPI.js";
 import {
   openBrowser
-} from "./chunk-DAKVBMD4.js";
+} from "./chunk-BCKVNORU.js";
 
 // src/auth-menu/auth-menu-audit.ts
 import { appendFileSync } from "node:fs";
@@ -172,7 +172,7 @@ function decideAuthLocalEvents(opts) {
 }
 
 // src/auth-menu/provider-auth-login.ts
-import { color } from "@wrongstack/core/utils";
+import { color, toErrorMessage } from "@wrongstack/core/utils";
 import {
   applyProviderAuthOutcome,
   createBuiltinProviderAuthRegistry
@@ -289,7 +289,7 @@ async function runProviderAuthLogin(deps, strategyId, opts = {}) {
 `));
     return 0;
   } catch (error) {
-    const message = error instanceof DOMException && error.name === "AbortError" ? "Login cancelled." : error instanceof Error ? error.message : String(error);
+    const message = error instanceof DOMException && error.name === "AbortError" ? "Login cancelled." : toErrorMessage(error);
     deps.renderer.writeError(`  Login failed: ${message}`);
     return 1;
   } finally {
@@ -845,7 +845,7 @@ import {
 
 // src/picker.ts
 import os from "node:os";
-import { color as color8, expectDefined as expectDefined2, toErrorMessage, withFileLock } from "@wrongstack/core/utils";
+import { color as color8, expectDefined as expectDefined2, toErrorMessage as toErrorMessage2, withFileLock } from "@wrongstack/core/utils";
 
 // src/picker-model-picker.ts
 import {
@@ -1341,7 +1341,7 @@ async function saveToGlobalConfig(configPath, provider, model, options = {}) {
           JSON.stringify({
             level: "warn",
             event: "picker.backup_failed",
-            message: toErrorMessage(err),
+            message: toErrorMessage2(err),
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
           })
         );
@@ -1364,7 +1364,7 @@ async function saveToGlobalConfig(configPath, provider, model, options = {}) {
       JSON.stringify({
         level: "warn",
         event: "picker.save_failed",
-        message: toErrorMessage(err),
+        message: toErrorMessage2(err),
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       })
     );
@@ -2024,4 +2024,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-GZSKLXYG.js.map
+//# sourceMappingURL=chunk-RAWHRRUJ.js.map

package/dist/{chunk-PA4VBCXS.js → chunk-RBZVDWTL.js}

@@ -112,4 +112,4 @@ async function discoverAndMergeProviders(opts) {
 export {
   discoverAndMergeProviders
 };
-//# sourceMappingURL=chunk-PA4VBCXS.js.map
+//# sourceMappingURL=chunk-RBZVDWTL.js.map

package/dist/{chunk-YMXXOOFN.js → chunk-SPSHEZ46.js}

@@ -10,4 +10,4 @@ function activeProfileConfigPath(paths, config) {
 export {
   activeProfileConfigPath
 };
-//# sourceMappingURL=chunk-YMXXOOFN.js.map
+//# sourceMappingURL=chunk-SPSHEZ46.js.map

package/dist/{chunk-TWSQTQKR.js → chunk-T4TGMTH2.js}

@@ -1,9 +1,9 @@
 import {
   mutateConfigProviders
-} from "./chunk-ZYACRPLN.js";
+} from "./chunk-ZCXZGYO5.js";
 import {
   activeProfileConfigPath
-} from "./chunk-YMXXOOFN.js";
+} from "./chunk-SPSHEZ46.js";
 
 // src/wiring/provider-persisters.ts
 import {
@@ -51,4 +51,4 @@ export {
   installProviderPersisters,
   applyProviderOAuthRefresh2 as applyProviderOAuthRefresh
 };
-//# sourceMappingURL=chunk-TWSQTQKR.js.map
+//# sourceMappingURL=chunk-T4TGMTH2.js.map

package/dist/{chunk-LKFKO4JW.js → chunk-TZPKOS5G.js}

@@ -1,10 +1,10 @@
 import {
   patchConfig
-} from "./chunk-EWKESL4L.js";
+} from "./chunk-P24ZPPYH.js";
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-HHRYIDOW.js";
+} from "./chunk-VAQXOZKP.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -306,4 +306,4 @@ export {
   BUILTIN_PLUGIN_NAME_HINTS,
   setupPlugins
 };
-//# sourceMappingURL=chunk-LKFKO4JW.js.map
+//# sourceMappingURL=chunk-TZPKOS5G.js.map

package/dist/{chunk-X4LW5CZM.js → chunk-UBDLNC3N.js}

@@ -120,4 +120,4 @@ export {
   ensureProjectDataDir,
   touchProjectInManifest
 };
-//# sourceMappingURL=chunk-X4LW5CZM.js.map
+//# sourceMappingURL=chunk-UBDLNC3N.js.map

package/dist/{chunk-SDJCLEK6.js → chunk-UFRVTBV6.js}

@@ -94,4 +94,4 @@ export {
   resolveProviderCfgWithProxy,
   buildProviderForId
 };
-//# sourceMappingURL=chunk-SDJCLEK6.js.map
+//# sourceMappingURL=chunk-UFRVTBV6.js.map

package/dist/{chunk-VCYZ3WZV.js → chunk-UOQPDZ5H.js}

@@ -11,4 +11,4 @@ export {
   buildTaskGraphFromSddSnapshot,
   createKanbanRunMirror
 };
-//# sourceMappingURL=chunk-VCYZ3WZV.js.map
+//# sourceMappingURL=chunk-UOQPDZ5H.js.map

package/dist/{chunk-PZQBGUVZ.js → chunk-UVF3BGET.js}

@@ -15,4 +15,4 @@ function applyAsciiMode(flags, env = process.env, streams = [process.stdout, pro
 export {
   applyAsciiMode
 };
-//# sourceMappingURL=chunk-PZQBGUVZ.js.map
+//# sourceMappingURL=chunk-UVF3BGET.js.map

package/dist/{chunk-HHRYIDOW.js → chunk-VAQXOZKP.js}

@@ -1,6 +1,6 @@
 import {
   backupCurrent
-} from "./chunk-4BX2YDTQ.js";
+} from "./chunk-BIGSVBPI.js";
 
 // src/wiring/external-plugins.ts
 import { isAbsolute, join, resolve } from "node:path";
@@ -356,11 +356,25 @@ import { homedir } from "node:os";
 import { join as join2 } from "node:path";
 import { updateJsonObjectFile } from "@wrongstack/core/utils";
 async function readConfig(file) {
+  let raw;
   try {
-    return JSON.parse(await fs.readFile(file, "utf8"));
+    raw = await fs.readFile(file, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return {};
+    throw error;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw.replace(/^\uFEFF/, ""));
   } catch {
-    return {};
+    throw new Error(
+      `Profile config "${file}" is not valid JSON \u2014 fix or remove it before changing plugins`
+    );
   }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`Profile config "${file}" must contain a JSON object`);
+  }
+  return parsed;
 }
 function pluginName(p) {
   return typeof p === "string" ? p : p.name;
@@ -411,6 +425,7 @@ import { execFile } from "node:child_process";
 import * as fs2 from "node:fs/promises";
 import { join as join3 } from "node:path";
 import { buildChildEnv } from "@wrongstack/core/utils";
+import { treeKill } from "@wrongstack/core/utils/tree-kill";
 import { resolveExecInvocation } from "@wrongstack/plugins/runtime";
 function detectPackageManager(args) {
   const override = args.find((a) => a.startsWith("--pm="));
@@ -467,7 +482,10 @@ function runPackageManagerInstall(pm, args, cwd) {
       });
       return;
     }
-    execFile(
+    let settled = false;
+    let timedOut = false;
+    let timer;
+    const child = execFile(
       invocation.cmd,
       invocation.args,
       {
@@ -476,20 +494,29 @@ function runPackageManagerInstall(pm, args, cwd) {
         // untrusted package lifecycle scripts — with the full inherited
         // environment. Strip credentials via the shared child env.
         env: buildChildEnv(),
-        timeout: 3e5,
         maxBuffer: 16 * 1024 * 1024,
         windowsHide: true,
         ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       },
       (err, stdout, stderr) => {
+        settled = true;
+        clearTimeout(timer);
         const code = err ? err.code ?? 1 : 0;
         resolvePromise({
-          code: typeof code === "number" ? code : 1,
+          code: typeof code === "number" && !timedOut ? code : 1,
           stdout: typeof stdout === "string" ? stdout : "",
           stderr: typeof stderr === "string" ? stderr : ""
         });
       }
     );
+    if (!settled) {
+      timer = setTimeout(() => {
+        timedOut = true;
+        treeKill(child);
+        child.stdout?.destroy();
+        child.stderr?.destroy();
+      }, 3e5);
+    }
   });
 }
 async function installPluginPackage(spec, args, deps) {
@@ -1109,4 +1136,4 @@ export {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 };
-//# sourceMappingURL=chunk-HHRYIDOW.js.map
+//# sourceMappingURL=chunk-VAQXOZKP.js.map

package/dist/{chunk-4XCBEUBX.js → chunk-VHC47E7U.js}

@@ -146,4 +146,4 @@ function buildHealthUrl(rawBase) {
 export {
   startProxyProbe
 };
-//# sourceMappingURL=chunk-4XCBEUBX.js.map
+//# sourceMappingURL=chunk-VHC47E7U.js.map

package/dist/{chunk-LKPEBZBE.js → chunk-VI2HE4A5.js}

@@ -140,4 +140,4 @@ export {
   checkStructuredAnswer,
   repairPrompt
 };
-//# sourceMappingURL=chunk-LKPEBZBE.js.map
+//# sourceMappingURL=chunk-VI2HE4A5.js.map

package/dist/chunk-W23PY4IJ.js

@@ -0,0 +1,44 @@
+import { createRequire as __wrongstackWsRequire } from 'node:module';
+const require = __wrongstackWsRequire(import.meta.url);
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+export {
+  __require,
+  __commonJS,
+  __toESM
+};
+//# sourceMappingURL=chunk-W23PY4IJ.js.map

package/dist/{chunk-AT2A7RJZ.js → chunk-WDXNBYGD.js}

@@ -406,4 +406,4 @@ export {
   getTaskGraphId,
   getTaskTrackerExport
 };
-//# sourceMappingURL=chunk-AT2A7RJZ.js.map
+//# sourceMappingURL=chunk-WDXNBYGD.js.map

package/dist/{chunk-NRXWOMK7.js → chunk-XT3NAHRX.js}

@@ -334,4 +334,4 @@ export {
   createProjectKanbanAssignHandler,
   createHqCommandDispatcher
 };
-//# sourceMappingURL=chunk-NRXWOMK7.js.map
+//# sourceMappingURL=chunk-XT3NAHRX.js.map

package/dist/{chunk-ZYACRPLN.js → chunk-ZCXZGYO5.js}

@@ -58,6 +58,9 @@ function maskedKey(key) {
   const tail = key.slice(-4);
   return `${color.dim(head + "\u2026")}${tail}`;
 }
+function stripConfigBom(raw) {
+  return raw.replace(/^\uFEFF/, "");
+}
 async function loadConfigProviders(configPath, vault, opts) {
   const warn = opts?.warn;
   const targetPath = opts?.profileConfigPath ?? configPath;
@@ -72,7 +75,7 @@ async function loadConfigProviders(configPath, vault, opts) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(raw);
+    parsed = JSON.parse(stripConfigBom(raw));
     validateProviderConfigShape(parsed);
   } catch (err) {
     warn?.(`Config at ${targetPath} is not valid JSON: ${err.message}`);
@@ -118,7 +121,7 @@ async function mutateConfigProviders(configPath, vault, mutator, profileConfigPa
       }
       let parsed;
       try {
-        parsed = JSON.parse(raw);
+        parsed = JSON.parse(stripConfigBom(raw));
         validateProviderConfigShape(parsed);
       } catch (err) {
         if (fileExists) {
@@ -168,4 +171,4 @@ export {
   mutateConfigProviders,
   nowIso
 };
-//# sourceMappingURL=chunk-ZYACRPLN.js.map
+//# sourceMappingURL=chunk-ZCXZGYO5.js.map

package/dist/{chunk-65VNCAF6.js → chunk-ZNNFEKDZ.js}

@@ -1,6 +1,6 @@
 import {
   resolveProviderCfgWithProxy
-} from "./chunk-SDJCLEK6.js";
+} from "./chunk-UFRVTBV6.js";
 
 // src/acp-agent-list.ts
 import { REGISTRY_ID_ALIASES } from "@wrongstack/acp";
@@ -316,4 +316,4 @@ export {
   setupProvider,
   createGracefulShutdown
 };
-//# sourceMappingURL=chunk-65VNCAF6.js.map
+//# sourceMappingURL=chunk-ZNNFEKDZ.js.map

package/dist/{chunk-CDY4D5QK.js → chunk-ZTSTMFYW.js}

@@ -1,6 +1,6 @@
 import {
   startProxyProbe
-} from "./chunk-4XCBEUBX.js";
+} from "./chunk-VHC47E7U.js";
 
 // src/wiring/proxy-wiring.ts
 import { applyProxyConfig } from "@wrongstack/core/wiring/proxy-rewrite";
@@ -53,4 +53,4 @@ export {
   bootstrapWrongProxy,
   shutdownWrongProxy
 };
-//# sourceMappingURL=chunk-CDY4D5QK.js.map
+//# sourceMappingURL=chunk-ZTSTMFYW.js.map

package/dist/{chunk-YTEOAWOJ.js → chunk-ZXX3MJRL.js}

@@ -72,4 +72,4 @@ export {
   wantsLocalHelp,
   renderAuthLocalHelpToString
 };
-//# sourceMappingURL=chunk-YTEOAWOJ.js.map
+//# sourceMappingURL=chunk-ZXX3MJRL.js.map